How to do auditing for fDML

[zigzagdna]

I want to monitor if system accounts such as system, sys or other DBA
accounts
did any DML in my application schema. What are the minimal audit
statements
needed to accomplish this. I did read Oracle's documentation on AUDIT
statement, but it
doest not show how to audit entire schema, it shows how to audit
indivual objects in a schema which requires lots of staements and when
new bjects are added, one has to add auditing on them.

I know using Oracle Database Vault one can set realm to restrict this
but I do
not have Data Vault, just looking to audit this using Oracle’s
database auditing.
My organization also has Oracle Audit Vault, but Database Auditing
Events have to be set in database
first for collection agent to pass this information to Oracle Audit
Vault server.
Thanks a lot.

[Mladen Gogala]

You can't audit the entire schema with one statement. Something like

select 'audit all on '||owner||'.'||table_name||';'
from dba_tables
where owner='OWNER';

would create a SQL script that would do the trick. I's called "SQL
generating SQL" and is the oldest trick in the book.

--
http://mgogala.byethost5.com